CVE-2022-22706 Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 throu...
HighCVSS 7.8
EPSS 1.1%
CISA KEV
added 2023-03-30 · due 2023-04-20
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.
CISA Known Exploited Vulnerability
- Date added
- 2023-03-30
- Due date (FCEB)
- 2023-04-20
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Arm Ltd Bifrost GPU Kernel Driver | >= r0p0, < r36p0 | r36p0 |
| Arm Ltd Midgard GPU Kernel Driver | >= r26p0, < r32p0 | r32p0 |
| Arm Ltd Valhall GPU Kernel Driver | >= r19p0, < r36p0 | r36p0 |
References
- developer.arm.com vendor-advisory
- developer.arm.com vendor-advisory
- www.cisa.gov government-resource us-government-resource